Supply chain
β Supply Chain
United Healthcare, Aetna Life Insurance Company (CVS Health) and 46 more Third-Party Breach (July 2025)
Primary Source βIncident Details
Kelly Benefits says 2024 data breach impacts 550,000 customers. Kelly & Associates Insurance Group (dba Kelly Benefits) is informing more than half a million people of a data breach that compromised their personal information. The Maryland-based health and life insurance agency has issued an update on a security incident it suffered last year between December 12-17, when unauthorized actors breached its IT systems and stole files. On April 9, 2025, the company stated that the incident impacted 32,234 individuals. The figure was revised multiple times until the final tally shared with authorities in the U.S. counted 553,660 individuals. Third-party company: Kelly & Associates Insurance Group.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Kelly & Associates Insurance Group
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-07-01 Breach occurred
- 2025-07-01 Publicly disclosed